<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>68195</bug_id>
          
          <creation_ts>2011-09-15 15:14:02 -0700</creation_ts>
          <short_desc>ASSERTion failure with very large SVG Filter</short_desc>
          <delta_ts>2015-04-22 15:23:44 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>SVG</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>83317</dup_id>
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>68469</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Tim Horton">thorton</reporter>
          <assigned_to name="Tim Horton">thorton</assigned_to>
          <cc>krit</cc>
    
    <cc>sabouhallawa</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>zherczeg</cc>
    
    <cc>zimmermann</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>468113</commentid>
    <comment_count>0</comment_count>
      <attachid>107555</attachid>
    <who name="Tim Horton">thorton</who>
    <bug_when>2011-09-15 15:14:02 -0700</bug_when>
    <thetext>Created attachment 107555
test case

For some reason we ASSERT() if a filter is larger than an arbitrary maximum size; this is somewhat annoying, I feel like a web inspector warning or something might be better.


ASSERTION FAILED: isFilterSizeValid(rect)
/Volumes/Data/Shared/src/WebKit/OpenSource/Source/WebCore/platform/graphics/filters/FilterEffect.cpp(123) : PassRefPtr&lt;WTF::ByteArray&gt; WebCore::FilterEffect::asPremultipliedImage(const WebCore::IntRect &amp;)
1   WebCore::FilterEffect::asPremultipliedImage(WebCore::IntRect const&amp;)
2   WebCore::FEDisplacementMap::apply()
3   WebCore::RenderSVGResourceFilter::postApplyResource(WebCore::RenderObject*, WebCore::GraphicsContext*&amp;, unsigned short, WebCore::Path const*)
4   WebCore::SVGRenderSupport::finishRenderSVGContent(WebCore::RenderObject*, WebCore::PaintInfo&amp;, WebCore::GraphicsContext*)
...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>468114</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2011-09-15 15:14:33 -0700</bug_when>
    <thetext>&lt;rdar://problem/10133283&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>468292</commentid>
    <comment_count>2</comment_count>
    <who name="Dirk Schulze">krit</who>
    <bug_when>2011-09-15 22:16:20 -0700</bug_when>
    <thetext>That assertion looks wrong! single filter effects can be bigger than 5000x5000! Just the size of the source   is limited. The growing of effect size can be caused by the needs of single filter effects (e.g. blur needs a bigger image because of the blur radius).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1087607</commentid>
    <comment_count>3</comment_count>
    <who name="Said Abou-Hallawa">sabouhallawa</who>
    <bug_when>2015-04-22 15:23:44 -0700</bug_when>
    <thetext>A condition was added to FilterEffect::apply() to make early return if the input region is exceptionally large. The fix is in https://bugs.webkit.org/show_bug.cgi?id=83317.

*** This bug has been marked as a duplicate of bug 83317 ***</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>107555</attachid>
            <date>2011-09-15 15:14:02 -0700</date>
            <delta_ts>2011-09-15 15:14:02 -0700</delta_ts>
            <desc>test case</desc>
            <filename>SVGFuzz-B97D5A024C-klpOSd.svg</filename>
            <type>image/svg+xml</type>
            <size>230</size>
            <attacher name="Tim Horton">thorton</attacher>
            
              <data encoding="base64">PD94bWwgdmVyc2lvbj0iMS4wIiA/Pgo8c3ZnIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAw
L3N2ZyI+CiAgPGRlZnM+CiAgICA8ZmlsdGVyIGlkPSJmIj4KICAgICAgPGZlRGlzcGxhY2VtZW50
TWFwIHlDaGFubmVsU2VsZWN0b3I9IkEiLz4KICAgIDwvZmlsdGVyPgogIDwvZGVmcz4KCiAgPHJl
Y3QgZmlsdGVyPSJ1cmwoI2YpIiBoZWlnaHQ9IjIwMGNtIiB3aWR0aD0iMjAwY20iIC8+Cjwvc3Zn
Pgo=
</data>

          </attachment>
      

    </bug>

</bugzilla>